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Abstract 

This paper presents a method for enumerating all encoding operators 
in the Clifford group for a given stabilizer. Furthermore, we classify encod- 
ing operators into the equivalence classes such that EDPs (Entanglement 
Distillation Protocol) constructed from encoding operators in the same 
equivalence class have the same performance. By this classification, for a 
given parameter, the number of candidates for good EDPs is significantly 
reduced. As a result, we find the best EDP among EDPs constructed 
from [[4, 2]] stabilizer codes. This EDP has a better performance than 
previously known EDPs over wide range of fidelity. 

1 Introduction 

In various methods in quantum communication, we have to share a max- 
imally entangled state. Bennett et al. |3] proposed the entanglement dis- 
tillation protocol (EDP), which is a scheme for sharing a maximally en- 
tangled state by spatially separated two parties with local operations and 
classical communication. Classical communication in EDPs can be either 
one-way or two-way, and two-way EDPs can distill more entanglement 
than one-way EDPs. 

In [Tl 1151 ITSl I2UI . the stabilizer based EDP is proposed, which is con- 
structed from the quantum stabilizer code, and is generalization of the 
CSS code based EDP )24| . By using an [[n, k]] stabilizer code, we can 
construct EDPs that distill k Bell states from n Bell states. The recur- 
rence protocol ^ and the QPA protocol Pl are special cases of stabilizer 
based EDPs, which are constructed from [[2, 1]] stabilizer codes |2UI Sec- 
tion 4]. 

By now, we arbitrarily choose one of many encoding operators with 
a stabilizer based EDP. However, in construction of EDPs from quantum 
stabilizers, choice of encoding operators for stabilizer codes make large 
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differences in performances of constructed EDPs. Even though there ex- 
ist infinitely many encoding operators for a given quantum stabihzer, we 
cannot implement all encoding operators efficiently. The reason is as fol- 
lows. Any unitary operator can be approximated by using only elementary 
operators, the Hadamard operator, the phase operator, the controlled not 
operator, and the j operator. However in general, most unitary operators 
require exponentially many elementary operators to be approximated in 
high accuracy 1211 Section 4.5]. 

The Clifford group is the set of unitary operators generated by the 
Ifadamard operator, the phase operator, and the controlled not operator. 
In particular, each element in the Clifford group that acts on n qubits 
is products of at most 0{n ) previously described three operators [111 
1121 1141 . Thus, for a given stabilizer, encoding operators in the Clifford 
group are efficiently implementable. It is also known that operators in 
the Clifford group can be efficiently simulated on a classical computer 
(Gottesman-Knill Theorem) |13| . 

There is another method to construct two-way EDPs, which is the 
permutation based EDP |7|. Permutation based EDPs utilize local op- 
erations chosen from the Clifford group, and it is known that choices of 
local operations make difference in performances of permutation based 
EDPs. When encoding operators of stabilizer based EDPs are restricted 
to operators in the Clifford group, the classes of stabilizer based EDPs 
and permutation based EDPs are equivalent |18| . Elements of the Clif- 
ford group are described in terms of symplectic geometry, which enable 
us to enumerate all local operations for permutation based EDPs |51ll7|. 

In this paper, we construct a method for enumerating all encoding 
operators in the Clifford group for a given stabilizer. Furthermore, we 
classify encoding operators into the equivalence classes such that EDPs 
constructed from encoding operators in the same equivalence class have 
the same performance. Such a classification has not been considered for 
either the stabilizer based EDP nor the permutation based EDP until now. 
By this classification, for given parameters, the number of candidates for 
good EDPs is significantly reduced. For example, in the case of EDPs 
constructed from the [[4, 2]] stabilizer code, the number of candidates is 
reduced by 1/12288. It took one week to find the best EDP among EDPs 
constructed from the [[4, 2]] stabilizer code with computer search, so we 
need about 200 years to find the best EDP without our result. 

As a result, we find the best EDP over wide range of fidelity among 
EDPs constructed from [[4, 2]] stabilizer code. This EDP has a better 
performance than previously known EDPs over wide range of fidelity. 

This paper is organized as follows. In Section |21 we review the stabi- 
lizer code and the stabilizer based EDP. In Section |3| we show our main 
theorems. In Section |1] we show the best EDP found by using our main 
theorems. 

2 Preliminary 

In this section, we review the stabilizer code, the encoding operator of 
the stabilizer code, the construction of entanglement distillation protocols 
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(EDP) from stabilizer codes, and previously known results about two-way 
EDPs and the Clifford group. To make our argument general, we use the 
p-dimensional Hilbert space (qudit) instead of the two-dimensional space 
(qubit). 

2.1 Stabilizer code 

In this section, we review the non-binary generalization |19l 1231 of the 
stabilizer code |51I^I1L)|. 

Let Tl be the p-dimensional complex linear spaces with an orthonormal 
basis {|0), . . . , jp^ 1)}, where p is a prime number. We define two matrices 
X and Z by 

X\i} = |i -I- 1 mod p), Z\i) = u}^\i) 

with a complex primitive p-th root of 1. The matrices X and Z have 
the following relation 

ZX = LuXZ. (1) 

Let Zp — {0, . . . , p— 1} with addition and multiplication taken modulo 
p, and Zp be the n-dimensional vector space over Zp. For a vector a = 
(ai, . . . ,a„\bi,. .. ,bn) e Zp", let 

XZ"(a) ^X^i^'i ^-.-^X^-Z'". 

Note that eigenvalues of X^'Z'* are powers of lo for p > 3, and {±1, ±i} 
for p = 2, where i is the imaginary unit. For a vector c= (ci, . . . , c„) € Zp, 
we denote 

\c) = |ci) ® • ■ • ® lc„). 

Definition 1 Let 

P„ = {a;'XZ"(a) | i G Zp, a G Z^"} (2) 

for p > 3, 

P„ = {MXZ"(a) |MG{±l,±i},5GZ^"} 

for p = 2, and S a commutative subgroup of Vn- The group Vn is called 
the Pauli group and the subgroup S is called a stabilizer. 

Suppose that {XZ"(5i), . . . , XZ"(^„_fc) (and possibly some power of 
Lulpn for p > 3 and some power of i/p" for p = 2) } is a generating set of 
the group S, where ^i, . . ., £,„-k are linearly independent over Zp. From 
now, we fix a generating set of S as ^i, . . . , 5„_fc. 

A stabilizer code Q is a joint eigenspace of S in 7i®". There are 
many joint eigenspaces of S and we can distinguish an eigenspace by its 
eigenvalue of XZ"{^i) for i = 1, n — k. Hereafter we fix a joint 
eigenspace Q(0) of S and suppose that Q(0) belongs to the eigenvalue Ai 
of XZ"(|*i) for j = 1, . . . , n - fc. Note that Xi e {u" \ a e Zp} for p > 3, 
and Ai G {±1, ±i} for p = 2. For a vector x = (a;i, . . . ,x„_fc) G Zp"*", we 
denote Q{x) as a joint eigenspace that belongs to the eigenvalue XiU^^ of 
XZ"(fi) for i = 1, n- fc. 
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Definition 2 For two vectors x = (ai,. . .,a„|&i,. . . ,6„) and y = (ci,. . . ,Cn\di,. . . ,dn), 
the symplectic inner product is defined by 

n 

(a, = E biCi - aid,. 

i = l 

Suppose that we sent jip) € <3(0), and received XZ"{e}\(p). We can 
tell which eigenspace of S contains the state XZ"(e)\(p) by measuring an 
observable whose eigenspaces are the same as those of XZ"(^i). Then the 
measurement outcome always indicates that the measured state XZ"{e)\ip) 
belonging to the eigenspace that belongs to eigenvalue Xiu;^^''^ . 

2.2 Encoding operator 

In this section, wo review encoding operators of stabilizer codes. An 
encoding operator of a stabilizer code is a unitary matrix that maps the 
canonical basis of 7^®" to joint eigenvectors of a stabilizer S. 

Definition 3 Let n"{e) be the subspace of W®" such that W"(e) is 
spanned by 

{|e)®|f) |xeZ^}, 

where e = (ei, . . . , e„-k) € T2^~^ . 

Let {|'i?(e, a)) I X € Z*} be an orthonormal basis of Q{e). 

Definition 4 An encoding operator J7 of a stabilizer code is a unitary op- 
erator on 7^®" that maps an orthonormal basis of ?^(e) to an orthonormal 
basis of Q{e) for all e e Zp^^, i.e., 

U : Hie) 9 |e) (g) \x) ^ \^{e,x)) £ Q{e) 

for e G Zp^'' and x G Z*. 

Note that a state X^sez^ '^s\x) of H^'' is encoded into 

by U with ancilla qudits |e). 

2.3 Stabilizer based EDP 

In this section, we review the stabilizer based EDP. We define the maxi- 
mally entangled states in 7^®" ® H%" by 

\l3"{if)} = Ipn ® xZ"(iT)-l= ® lis), 

i=0 

where w G Zp". 
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Suppose that Alice and Bob share a mixed state p € S{TL^ ® Hg"), 
where 5CHf " (g) ^1") is the set of density operators on " ®n%" . The 
goal of an entanglement distillation protocol is to extract as many pairs 
of particles with state close to |/3^(0)) as possible from n pairs of particles 
in the state p, where 

1 

\P\^)) = ^Y.\iA)®\iB). 

For = (ai, . . . , a„|6i, . . . , we define Q = (ai, —61, a,i, 
—bn). Since the complex conjugate of a; is we can see that XZ"(^*) 
is the component-wise complex conjugated matrix of XZ"(5i). Let S* 
be the subgroup of Vn generated by {XZ"{^1), XZ"(^*_j.)}. Easy 
computation shows that S* is again commutative. So we can consider 
joint eigenspaces of S* . There exists a joint eigenspace Q*{x) of S* whose 
eigenvalue of XZ"(5*) is XiUj~^\ where Ai is the complex conjugate of Ai. 
For a state 

IV^) = ao|0) + • ■ • + Qp-.-ib" - 1) G H®", 

we define 

= aolO) H h ap"-i|p" - 1), 

where is the complex conjugate of q^. 

With those notation, our protocol is executed as follows. 

1. Alice measures an observable corresponding to XZ"(^*) for each i, 
and let Aio;""' be the eigenvalue of an eigenspace of S* containing 
the state after measurement. In what follows we refer to (ai, . . . , 
o-n-k) G Zp~'' as a measurement outcome. 

2. Bob measures an observable corresponding to XZ"(^i) for each i, 
and let AiW*** be the eigenvalue of an eigenspace of S containing the 
state after measurement. In what follows we also refer to (61, . . . , 
bn-k) G Zp"'' as a measurement outcome. 

3. Alice sends (ai, . . . , a„_fc) to Bob. 

4. If the difference of measurement outcomes (bi—ai, fe„_fc—On-fc) ^ 
T for a previously specified set T C Zp"*", then they abort the pro- 
tocol. 

5. Bob performs the error correction process according to ai, . . . , a^-k 
as follows: Bob finds a matrix M G Vn such that MQ{b) = Q{a). 
There are many matrices M with MQ{b) = Q{a), and Bob choose 
M providing the highest fidelity among those matrices. See |20| for 
details. He applies M to his particles. 

6. Alice and Bob apply the inverse of encoding operators U and U* 
of the quantum stabilizer codes respectively, where U* is the adjoint 
operator of the encoding operator U and U is the component-wise 
complex conjugate operator of U* . We stress that Alice applies U 
instead of C/* P^HT) . 

7. Alice and Bob discards n — k ancilla qudits. 
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Note that, when we start with the state \f3"{u)}, the state becomes 

(V ® XZ"(7l)) ^))® Wa,x)) (3) 

after Step '20' proof of Lemma 1]. 

2.4 Clifford group 

Definition 5 Let W„ be the set of all unitary operators on 7i®", and 
N{'Pn) be the normalizer of Vn in Un, i.e., 

N{r„) = {U\U eUn, UMU* G P„ VAf G Pn} , 

which is called the Clifford group, where U* is the adjoint operator of U . 

The unitary operators in the Clifford group N{Vn) are decomposed 
into products of the elementary operators, where elementary operators for 
p = 2 are the Hadamard operator, the phase operator, and the controlled 
not operator I14| . and the elementary operators for p > 2 are the p- 
dimensional discrete Fourier transform operator, the sum operator, the p- 
dimensional phase operator, and the S operator |12| . The required number 
of the elementary operators to represent an operator in the Clifford group 
is at most O(n^). 

3 Construction of encoding operators 

In this section, we present a method to enumerate all encoding operators 
in the Clifford group for a given stabilizer (Definitions 1121 and I15II . Then, 
we show relations between Bell states and encoded Bell states (Lemma l2L)l 
Corollarv l21l and Corollarv l221 . Then, we classify encoding operators into 
equivalence classes such that EDPs constructed from encoding operators 
in the same equivalence class have the same performances (Definition 1281 
Theorems |H and OOJ • Finally, we show the method to enumerate all 
equivalence classes (Theorem 1351 . 

3.1 Construction method 

For a given stabilizer S, we define M[S) as the set of all encoding opera- 
tors, which maps the subspace TL{e) to the subspace Q{e) for all e G Z^^'' 
(See Definition 0. 

Definition 6 Let A^ci('S') be the subset of M{S) defined by 

M,i[S) = M{S)nN{V„). 

Mc\{S) is the set of all encoding operators that are contained in the 
Clifford group. The goal of this section is to present a method for enu- 
merating all elements of Mci{S). Although the method for enumerating 
all elements of the Clifford group is known |51 117|. the method for enu- 
merating all elements of Mci{S) for a given stabilizer S is not known. 
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Definition 7 The linear space Zp" with symplectic inner product defined 
in Definition 121 is called the symplectic space. 

Definition 8 Let {xi, ...,£„, j/i, j/n} be a basis of a symplectic space 
Zp" . If Xi and yi satisfy 

{xi,y.j) = Sij, 
{xi,Xj) = 0, 

for all i and j, then the basis {x\, . . . , a;„, yi, . . . , y„} is called a hyperbolic 
basis. 

Lemma 9 There exists vectors (,n^k+i, ■ ■ ■ and ffi, . . . ,ff„ such that 

= Sij, 

(C.,?.) = 0, (4) 
iVuV]) = 0, 

i.e., {^1, . . . , ffi, . . . ,ffn} form a hyperbolic basis of Zp". 

Proof. The assertion of this lemma follows from the standard fact in 
symplectic geometry 1221 1^. ■ 

Lemma 10 Let C be a linear subspace of Zp" spanned by ^i, . . . , ^„-k, 
and C""" be the orthogonal space of C with respect to the symplectic inner 
product. Let Cmax be a linear subspace of Zp" spanned by 
Then, 

C CI Cmax ^ C , 

and C-'- is spanned by Ci, • ■ • ,C™>'7i-fc+i, ■ ■ ■ 

Proof. The assertion of this lemma follows from the property of a hyper- 
bolic basis. ■ 

Definition 11 For p = 2, we define l-i{^i) , fJ^iffi) G {±1, ±1} for each 
XZ"(^i), XZ"(r;i) as follows, where i is the imaginary unit. For a vector 
^i = (ai, . . . ,a„|&i, . . . , b„), we define m(^i) = \{i \ Oi = bi = 1}|, i.e., the 
number of XZs in XZ"(fi). We define /^(^i) as 

fi{fji) is defined in the same way. 



= -i- In case of n = 3 and XZ^(5j) = ® /2 ® X^, ^tfe) = -1- 
We need ^(Cj) so that ( /i(^j)XZ"(fj) ) — . For p > 3, we do not need 



and fi{ff. 
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for p > 3, and 



Definition 12 Let Smax be a subgroup of Vn generated by {XZ"(a;) | 
X G Cmax}- Let Qmin(O) be a stabilizer code defined by Smax contained in 
Q(0). We have dimQiniii(O) — 1. Let |'i/'(0)) G Qmin(O) be a state vector 
of unit norm. 
Let 

x"(/":) = e4,mr\ff,), (5) 
z"(/0 = e4/oxz"(c:) (6) 

X"(/0 = e4/0M(r?0XZ"(770, (7) 

z"(/o = e,(/OM(c:)xz"(e*) (8) 

for p — 2, where fi is a vector such that the i-th element is 1 and the 
other elements are 0, 9x{-) is an arbitrary power of uj, and we choose 6z{-) 
so that Z"(/0|V'(0)) = IV'(O)) for i = l,...,n. 
Let 

n 

z"{v) = n(z(/o)''' (10) 

for u = (ui, . . . ,Un) G Zp and « = (ui, . . . ,u„) G Zp. 
We define our encoding operator Ue by 

: X"(n)|0) ^X"(u)|V.(0)), (11) 

where X"(u) = (g) • • • (g) X"" . We define Z"(u) in a similar manner. 

Remark 13 From Lemma lTCl we find that Eqs. ||UJ and IIUII are a gener- 
alization of encoded X"(u) operator and encoded Z"(iJ) operator defined 
in [TI| . 

Remark 14 The construction of the encoding operator depends on the 
cho_ice of ^„_fc+i, . . . , ^„ and rfi,...,ff„ that satisfy Eq. 1^, Qmin(O) C 
Q(0), and phase factors 6x{-)- An example will be given in Section|l| 

Definition 15 For a given stabilizer S, we define Mg{S) as the set 
of encoding operators Ue for all choices of ^„-k+i, ■ ■ ■ ,^n, ffi,...,ff„, 
Qmin(O) C Q(0), and O^-). 

A4g{S) is the set of all encoding operators that are constructed by the 
method in Definition 1121 Next, we show A4g(S) is equal to 7Vfci(S'). 

Lemma 16 For X"{s},Z"{P),Ue defined by Eqs. ll^. lITOl. and lITTl. we 

have 

f/eX"(s)f/: = yC{s)£Tn VSGZ^, (12) 

UeZ"{i)U: = Z"(f)GP„ VfGZ^. (13) 
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Proof. For u G ZJJ, let \<fi{u)) = Ue\u) = X"{u)\tP{0)). For s G Z^, we 
have 

UeX{s)U:Mu)) = (7eX"(s)|{t) 

= Ue\u + S) 

= X"(K + sliV(0)) 
= X"(s)X"(S)|V^(0)) 

= X"(s)|v3(u)). 

Since {|<^(u)) | u G Z^} form an orthonormal basis of H®", we have 

UeX" {S) U: = X" (S) G Vn VS- G Z^ . 

Next, for t G Zp, we have 

UeZ"{t)u:Mu)) = UeZ"{t)\u) 

= c.(*'-"'X"(^)lV(0)), (14) 

where (•,•) is the standard inner product. From the definition of Z"(f), 
we have Z"(t)| ?/)(())) = |^(0)). Since and rfj satisfy Eq. I^J, we have 

XZ"(rfOXZ"(C;) = a.-^XZ"(r,)XZ"(r?0, 

xz"(foxz"(c;) = xz"(c;)xz"(c:), 

XZ-{fji)Xr\ifj) = XZ"(%)XZ"(rfO, 

and 

X"(M)Z"(t) = a;-''''")Z"(f)X"(M). 
Since Z(t)iV'(0)) = |i/'(0)), Eq. ITIJ is equal to 

= a;('''"'c^-('''")Z"(f)X"(K)|i/'(0)) 
= Z"(t)|v.(il)). 

Thus, we have 

(7e z" (f) [/: = z" (t) G v„ vr G z^ . 



Corollary 17 For any Ue G XgCS), we have Ue G N{V„). 

Proof. Since {X"(s)} and {Z"(f)} are the generator set of Vn for p > 3, 
and {X"(s)} and {Z"(f)} and ilpn are the generator set of Vn for p = 2, 
from Lemma [THl we have Ue G N{Vn) ■ 

Lemma 18 For Ue G A^ciCS), there exists Ue G A^9(5') such that Ue = 
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Proof. We will construct Ue G A4g{S) such that Ue = Uc- We set 1-0) by 

W = C/c|0), 

and set ^„-k+i, and 6(3 (■) by 

Z"(/0 = e,(/OXZ"(eO for j = l,...,n-fc (15) 
Z"(/l) = e3(/0XZ"(e:) = C/cZ"(/^)(7: 

for i — n — k + 1, . . . ,n, (16) 

for p > 3, and 

Z"(/;) = e,(/;*)M(C;)XZ"(C;) forj = l,...,n-fe, (17) 

z"(./;) = 0.(/;)Mc.)xz(c;) = (/cZ"(,/5)f/: 

for j = n — fc + 1, . . . , n, (18) 

for p = 2, where fi is a vector such that the i-th element is 1 and the 
other elements are 0. Note that ^n-k+i, ■ ■ ■ are determined by Uc, 
while ^1, . . . ,£,n-k are fixed basis of C as we stated in Section |21 From 
Definitional we have € Q(0). For i = 1, . . . , n — k, we set 9zifi) so that 
Z"(/i)|i/)) = !'(/')• Specifically, since Q(0) is an eigenspace that belongs to 
an eigenvalue Xi of XZ"(^i) for i = 1, . . . ,n ~ k, we set 6z{fi) ~ Ai for 

p > 3 and 9z{fi) = Xi^J.{^^) for p = 2. 
Set . . . ,fjn, and 6'a;(-) by 

X"(/0 = 0.{mZ"iff,) = C/cX"(/0;7: for z = 1, . . . , n, (19) 
for p > 3, and 

X"(./j) = e4L-M%)XZ(rfj) = t/.X" (/;■)[/: for j = l,...,n(20) 
for p = 2. Then we have 

n 

X"(^2) = n (x"(/0)"' = (7.X"(72)f/: for u G Z^. 

i=l 

We also have 

Uc\u} = UcX"{u)\0) 

= i7.X"(K)t/:t/c|0) 

= X"(n)|v^). 

Next, we show 

Z"(/0 = f/cZ"(/0(7: fori = l,...,n-fc. (21) 

Let u = (ei, . . . ,e„_fc,a;i, . . . , 2;^) G , e = (ei, . . . ,e„_fe), and |v(m)) = 
Uc\u). Then, since |(p(m)) G Q(e) and XZ"(|*)|vp(w)) = XiUJ^-\^{u)}, we 
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have 

z^ifoMu)) = 0,(/oxz"(c:)|^(n)) 

= co^'u,x"(u)u:ucZ"{,n)u:\i>) 

= f/eZ"(/l)C/*|^(^)), 

for i = 1, . . . ,n — k. Since | u £ Zp} form an orthonormal basis 

of •H®", Eq. is satisfied. 

From Eqs. JTHl, (0, GHJ and we have 

xz"(|*)xz"fe) = xz"(c;)xz"(c:) 

XZ"(,fOXZ"(77.) = XZ"(%)XZ"(rfO 
XZ"(COXZ"(770 = c^XZ"(r?OXZ"(eO 
XZ"(C:)XZ"(»7.) = XZ"(%)XZ"(e*), 

which mean that ^i, . . . , and ffi, . . . ,ffn satisfy Eq. It is easy to 
check that | -i/;) is an eigenvector of XZ" (^i ) , . . . , XZ" ) , thus we can write 
W = |7/)(0)) e Qmin(O) for some gn.in(0). 

Consequently, we can construct an encoding operator Ue £ A4g{S) 
such that Ue — Uc- ■ 

From Corollarv 1171 and Lemma ITHl we have the following theorem. 

Theorem 19 For a given stabilizer S, Mg{S) = Mci{S). 



3.2 Classification of encoding operators 

In this section, we show the correspondence between Bell states and Bell 
states encoded by encoding operators (Lemma 1201 Corollary 1211 and 
Corollarv I22|l . Then we show the output state of our EDPs is always 
a probabilistic mixture of Bell states if the input state of protocols is 
a probabilistic mixture of Bell states (Theorem 1271 . Then, we classify 
encoding operators into equivalence classes such that EDPs constructed 
from encoding operators in the same equivalence class have the same per- 
formance when the input of EDPs are the probabilistic mixture of Bell 
states (Definition UHl and Theorems 1^ TO . 

Lemma 20 The Bell state |/3'°(0)) with ancilla qubits \e)A ® \e)B, i.e., 
|/3'"(0),e) = ^= \e)A(E)\v)A<E)\e)B(E)\v)B, 

is mapped by (7e ® ?7e to 

1 — n _ 

|<^(e)) = -i= X {u)md))^^{miO)), (22) 
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where X (u) is the complex conjugated matrix of X{u), and ex Z* is the 
subset {(ei, . . .,e„-k,xi, . . . ,Xk) \ Xi £ Zp} of Zp. 

Proof. It is obvious from Eq. IIH in the definition of the encoding operator 



Corollary 21 A Bell state 

V Cg)X'=(/)Z'=(m)|/3'=(0)) 
with ancilla qubits \e)A ® \e)B, i-e-, 

\f3>'{£,rn),e)^^ ^ \e) 



(23) 



A®|w)A®|e>s®X'=(/)Z'=(m)l«)B, (24) 



is mapped by C/e ® ?7e to 



• XZ^iiG + mH)\(f>{e)), 



(25) 



multiplied by a scalar of unit absolute value, where the matrices G and 
H are 





/ ffn-k+l \ 






G = 




H = 






\ Vn J 




I J 




? = (0,. 


.,0,£i,.. 


,4) G Z^ 


m = (0, . 


• ,0,mi, . 


.,mfc) G Zp 



Proof. Let 



From Eqs. O and itBt . 



(26) 
(27) 



C/eX"(^"')Z"(m')f/r =X"(£')Z"(m'). 
Thus, a state in Eq. I24II is mapped by Us ® Ue to 

(C^® ?7e)l/3'=(^"^m),e) 
= (CJe® t/e)(V ®X"(?)Z"(m'))i/3'''(0),^ 
= (I4 ® l7e)(V ® X"(f )Z"(m'))(t77* » f/:)(t7:(g) (7e)i/3'=(0),e) 
= V (8)X"(/)Z"(m')|0(^) 
~ V (8)XZ"(/G)XZ"(m//)j<?i(e)) 
~ V ® XZ" (/G + rhH) 10(e)), 

where ~ denotes that one vector is equal to another vector multiplied by 
a scalar of unit absolute value. Note that (a) follows from Eqs. Q, 
and lUnil. ■ 
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Corollary 22 The state 

V ®XZ"(/G + mff)|<^(e)) 
is mapped by Ue ® U2 to 

\p\lrh),e) = |e)A®|«)A®|e)s«'X'=(/)Z'=(m)|iT)B 

multiplied by a scalar of unit absolute value, i.e., \p''{w)) with ancilla 
qudits \e)A ® |e)s, where w = {£i, . . . ,lk\mi, . . . ,mk). ■ 

Definition 23 For a vector s — (si, . . . , s„_fc), we define the set D{s) by 
D{s) = {teZl"\{^,,P)^s,}. 

Lemma 24 When we apply Steps of our distillation protocol to the 
state \f3"{t)) and Alice and Bob do not abort the protocol in Step 2] the 
resulting quantum state is 

V®XZ"(/(t))!<^(a)), 

where /(■) is the mapping from Zp" to and depends on the error 
correction process in Step|5] Specifically, /(•) is defined as follows. Let ? 
be the most likely error in D{b — a). The mapping /(•) is defined as 

/: D{b-a)3x^x-i' eC^ (28) 

for each D{b - a). Note that Ug^^^-kD{s) = Zp". 

Proof. After Steps and |^ the state becomes 

P"(a) ® P(&)|/3"(t)) = Jpfc ® XZ"(t)|<^(a)) G Q*{a) ® Q{b), 

where P*(a) and P(&) represent the projection on to Q*{a) and Q{b) re- 
spectively. In Step 13 Bob decides the most likely error ? G D{b- a) and 
appHes M = XZ"(— Then the state becomes 

7pfc ®XZ"(f-?)|0(a)) =/pfc ®XZ" (/(*)) l<?i(a)) G Q*(a)«)Q(a). 
The condition A/Q(6) = Q{a) implies f - ? G C"^. ■ 

Remark 25 The mapping /(•) does not depends on the choice of a basis 
{Cii • ■ • 1 £,n-k} of C or the joint eigenspace Q(0). Since there exists one to 
one correspondence between D(s) and a coset of Zp"/C^, the mapping 
/(■) is defined only by a representative ? of each coset of Zp"/C^ in 
Eq. lUHJ- 
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Lemma 26 When we apply Step^I7|of our distillation protocol to the 
state |/3"(t)) and Alice and Bob do not abort the protocol in Step 2] the 
resulting quantum state is 

|/3''(»)) = |/3''(go /(*))), 

where the mapping g is the mapping from to Z^*^, more precisely 

g: 3 £G + mH + V ^ w = (^i, . . . , 4|mi, . . . , rrife) eZf V u G C. (29) 

Proof. From Lemma 1^ after Steps the resulting quantum state is 

V®XZ"(/(t))!<^(a)), 

with fij) £C^. Since ^i, . . . , (^„,ffn-k+i , . . . ,fjn form a basis of and 
^1, . . . , i^n-k form a basis of C, /(?) can be written as a linear combination 

k 

fit)^'^£iff„-k+i + mi(,„-k+i+v, (30) 

i = l 

where « G C. Since 10(a)) is a joint engeinvector of 5", 

I^k ® XZ"{f{i))\(l>{a)} = V ® XZ"(/G + mH + v)\(t>{a)) 
~ V ® XZ"(/G + miy)l<?!)(a)) 

By Corollary 1221 after Step|S|and[7|the quantum state becomes \ f3''{'w)) = 
\l3''{g° fit))), where w = (li, . . . ,4|mi,. . . ,mfc). ■ 

Theorem 27 When the input to our distillation protocol is a probabilis- 
tic mixture of Bell states |/3"(t)) for Tg Zp", i.e., 

= J2 p»(i)ir(t)){/3"(i)i (31) 

and the difference of Alice and Bobs' measurement result is 6 — a G T, 
then the output from our distillation protocol is also probabilistic mixture 
of Bell states \l3''{w)) for w G Zp*', i.e., 

Pout^ Pout{w)\p''{w)){l3\w)\, 

where Pout{w) is given by 

Poutiw)^ J2 PU^, (32) 

tSD(b-a):gof(t)=w 

and -P/„(f) is normalized as 

P^n{P) 



PLit) = 
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Proof. After Steps 1-4 of our distillation protocol, from the linearity of 
the measurement and the error correction, the input state pi„ becomes 

p'= J2 (V ® XZ"(/(t))|0(a)){0(e-Oj V ® XZ"(/(t))*) . 

teD{b-a) 

After applying the inverse of the encoding operator, the state p' becomes 
Pout = Yl PMP\aofm{P\9of{m (33) 

teD(b-a) 

= E Pout{w)\p\w)){p\w)l (34) 
where Pout{w) is given by 

t£D(b—S):gof(t) = w 

■ 

When the input of EDPs are the probabilistic mixture of Bell states, 
the performance of the distillation protocol only depends on the coeffi- 
cients Poutiw) of the output of the protocol. Hereafter, we fix the stabi- 
lizer S and the error correction process /(•). 

Definition 28 For two stabilizer based EDPs constructed from encoding 
operators Ue and Ve respectively, let the mapping gu be determined by 
Ue in Eq. II29II and gv be determined by Ve in Eq. I29II . If gu{-) = gv{-), 
then we define two encoding operators Ue and Ve are similar and denote 
it by Ue ~ Ve. 

Theorem 29 For two stabilizer based EDPs constructed from encoding 
operators Ue and Ve respectively, let 

pout,u^ = ^ Pout,uA^)\fi'^{w)){l3''{w)\ 

ujgZ^fe 

and 

pout,V^ = 'Y Pout,v^{w)\(3^ {w)) {(3^ {w)\ 
tBez^fc 

be output states of each protocols when inputs of each protocol are Eq. (I3H . 
If Ue ^ Ve, then we have 

Pout,uA'^) = Pout,vA'^) VwGZp*', (35) 
i.e., performances of two protocols are the same. 

Proof. From Eq. 1321 and the fact that gu{-) = gv{ ), for any w G Ti^ 

Pout,uA^) = J2 

teD{b-a):guof{t) = w 

J2 PU^=Pout,vAw). 

t£D{b—3):gYof(t) = w 
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Theorem 30 If Eq. 1351 holds for any input state of the form in Eq. I31II . 

then Ue ~ Ve- 

Proof. We prove the contraposition of this statement, i.e., if Ue 7^ Ve, 
then Eq. 13511 does not hold for some input states. Since gu{-) 7^ gv{-), 
there exists u G such that gu{u) 7^ gv{u). Consider the following 
input state. Let 

\ if /(t) / M 

Then we have 

Pout,U^{'w) = 

and Eq. I35II does not holds. 



1 if w = gu{u) 

if tU / gu(u) 

1 if w = gv(u) 
if w / gv{u) 



3.3 Enumeration of equivalence classes of encod- 
ing operators 

Classify Mg{S) into equivalence classes by ~, and denote the represen- 
tative set of the equivalence classes by Mg{S). In this section, we show 
how to enumerate all elements of Mg{S) in Theorem 1351 

Lemma 31 Let two encoding operators Ue and Ve be constructed from 
{in-k+i,- ■■,in, ffn-k+1,. ■ ■ , fjn} and . . . , Cn , Vn-k+1,- ■ ■ , Vu} re- 

spectively and the other parameters (a) Ox{-), (b) ffi, . . . ,ffn-k, and (c) 
<3min(0) be the same. Further assume that = (mod C) for all 
n — k + l<i<n and ffi = ff^ (mod C) for all n — fc 4- 1 < i < n. 
Then ^ Ve. 

Proof. Let gu, Gu, and Hu be determined by Ue in Eq. 129L and gv, 
Gvi and Hv be determined by Ve in Eq. 12911 . For any vector u G C^, 
we have 

u = £Gu + mHu + v = £Gv + mHy + v 3 v, v eC. 
Thus, we have 

gu{u) = gv{u) VugC^. 
and Ue ~ Ve. ■ 



Lemma 32 Let two encoding operators Ue and Ve be constructed from 
{^n-fc+i, Vn-k+i, • ■ ■ , Vn} and . . . , Cn, ?7^_fe+i, • • • , ffn} re- 

spectively and the other parameters (a). 0x{-), (b). 771, ... , ffn-k, and (c). 
Qmin(O) are the same. If 5u(-) — gv{-), i.e., f/e ~ Ve, then = 
(mod C) for alln — fc + l<j<w and ffi = if^ (mod C) for all 71 — fc + 1 < 
i < n. 
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Proof. For u G such that 

from Eq. J^U, we have 

u — ii+v — ^i+if 3 v,v' e C. 

Thus, we have 

which means = (mod C) for n — A: + l<j<n. Similarly, for u £ 
such that 

from Eq. 12911 . we have 

u = ffi+v — ffi + v 3 v,v' £ C. 

Thus, we have 

fji — ffi = V — V G C, 
which means ffi = ff^ (mod C) for n — k + l<i<n. ■ 

Definition 33 Let x + C and y + C be elements of the coset /C. 
Define a symplectic inner product of a; + C and y + Cas 

{x + C,y + C) = {x,y). (36) 

Note that this inner product does not depend on choices of a representa- 
tives X of X + C or y of y + C. 

Lemma 34 The linear space jC is a 2A;-dimensional symplectic space 
with respect to the symplectic inner product in Eq. 1)36^ . and + 
C, . . . , ^„ + C, 77„_fc+i + C, . . . , ff„ + C} form a hyperbolic basis of C^/C. 

Proof. It is easy to check that {^n-fc+i+C, . . . , Cn+C, »7„_fc+i+C, . . . , 77,1 + 
C} form a basis of C^/C. From Eqs. |0J, we have 

{f,+c,c;+c) = 

(r?' +C,r7' +C) = 

for i, j G {n — A; + 1, . . . , n}. ■ 

As a consequence of Lemmas 1811 and 1821 we have the following theo- 



rem. 
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Theorem 35 There is one-to-one correspondence between Elements of 
A4g{S) and choices of hyperbolic bases of jC with respect to the inner 
product in Eq. 1361 . Specifically, if two encoding operators JJe, and 14 are 
different only by (a) 6l:r(-), (b) rfi, . . . ,7f„_fc, or (c) Qmin(O), then Ue. ~ Ve- 
Two encoding operators and Ve are ?7e ~ 14 if and only if = ^'^ 
(mod C) for all n~k+l < i < n and ffi = ffi (mod C) for all n—k+1 < i < 
n, i.e., two hyperbolic bases {^„-k+i +C, . . . ,^n + C rfn-k+i +C, . . . ,f]„ + 
C} and {d-fc+i C, . . . , C rf„_;,+i + C, ?f„ -|- C} of C^/C are 
equal f Lemmas 1311 and I32II . 

Remark 36 When the input of the protocol is a probabilistic mixture of 
Bell states, we can find the best stabilizer based EDP as follows. For a 
given parameter n and k, find appropriate values for the following param- 
eters. 

(a) a stabilizer S: a self-orthogonal subspace C C Zp". 

(b) decision rule whether or not to abort the protocol in Step0] a set 

r c z;^-*. 

(c) error correction process: mapping /(■) from Zp" to . 

(d) an equivalence class of encoding operator: a hyperbolic basis of 
C^/C. 

Remark 1251 and Theorem 1351 significantly reduce the number of candi- 
dates of good EDPs. Indeed, for a given parameter n and k, we enumerate 
n — k dimensional self-orthogonal subspaces C (enumerating stabilizers S) 
and all hyperbolic bases of jC for each C (enumerating the equivalence 
classes of encoding operators) , instead of all hyperbolic bases of Zp" (enu- 
merating stabilizers S and all encoding operators). The number of all 
hyperbolic bases of Zp" is equal to the cardinality of the set of symplectic 
mappings on Z^", i.e., |Sp2„(Zp)| = p""" nr=i(P^'-l) 1^ Theorem 3.1.2]. 
While, the number of n — fc dimensional self-orthogonal subspace of Zp" is 
nr=o'°~^(P^"~'-P')/(p""'°-P') (see remarklSTl. and the number of all hy- 
perbolic bases of C^/C is equal to |Sp2fc(Zp)| = p'^' nLi(P^' " !)• Thus 
the number of candidates of EDPs is reduced by l/{p"''"'=^ nr=i*(p'-l)}- 
For example, the number of candidates of EDPs is reduced by 1/12288 
when n = 4, = 2, and p = 2. Note that the number of permutation 
based EDPs Q for a given parameter n, k, and p is also same as the 
number of all hyperbolic bases of Zp". 

Remark 37 The number of n — fc dimensional self-orthogonal subspace of 
Zp" is the number of n — k mutually orthonormal vectors WIZq~^ ij?^'^ — 
p') divided by the number of bases of n — fc dimensional self-orthogonal 
subspace nr="o'-'(p"-'=-p')- 

4 EDP with good performance 

We can improve the performance of the protocol proposed in |20l by choos- 
ing an optimal encoding operator. The improved protocol has the best 
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performance over the range of fidelity greater than 0.6 for a parameter 
n = 4, fc = 2, p = 2, and T — {0}. Note that there is no choice of er- 
ror correction process when T = {0}. We calculated the performance by 
using the protocol appropriate times iteratively followed by the hashing 
protocol. The performance is plotted in Fig. and is compared to the 
performance of the protocol in |2U|. The proposed protocol is also com- 
pared to the performance of the QPA protocol in Fig. |51 and has a better 
performance than the QPA protocol over the wide range of fidelity. We 
remark that the QPA protocol has the best performance among EDPs 
constructed from [[2, 1]] stabilizer codes. 

The proposed protocol is constructed from a stabilizer code with a 
stabilizer 

S = {X(g,X(g,X(g,X, Z® Z® Z® Z} . 

The encoding operator is constructed as follows. The vector representa- 
tion of the stabilizer is 

C*! = (lllljOOOO), 6 = (OOOOlllll). 
Then we choose ^3)^4 s^nd 771, . . . , 774 to be 

= (llOOjOOOO), ii = (1010|0000), 
^1 = (OOOOjlllO), -^2 = (1110|0000), 
773 = (OOOojlOlO), 774 = (1010|1100). 

We choose 

X*(/0 = Z®Z®Z®h X'*(/2) = X(8)X®X®/2 
X''(/3) = Z (g, I2 (» Z (g) I2 X*(/l) =iXZ(g)Z(»X(»l2 



and 

Z'*(/i) =X(g)X(g)X(g)X T'ifi) = Z (» Z (» Z (» Z 
Z^ifa) ^X®X®h®h Z\f4) =X®h(gX®h. 

We choose one of joint eigenspaces Q(0) spanned by 

{10000) 11111), 10011) + 11100), 11001) 10110), 10101) 11010)} , 

and choose (5min(0) as 

Qmin(O) = {|0000)-H 11111) 10011) +11100) 

+11001) + 10110) + 10101) + 11010)} . 



5 Conclusion 

In this paper, we showed a method for enumerating all encoding opera- 
tors in the Clifford group for a given stabilizer code systematically. We 
further classified those encoding operators into equivalence classes such 
that EDPs constructed from encoding operators in the same equivalence 
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fidelity F of Werner state 

Figure 1: Comparison of the performance between the proposed protocol and 
the protocol originally proposed in ,2(1] . 

class have the same performance when the input of EDPs is a probabilis- 
tic mixture of Bell states. By this classification, we can search EDPs 
with good performances efficiently. As a result, we found the best EDP 
among EDPs constructed from [[4, 2]] stabilizer codes. Although in this 
paper we employed T = {0}, i.e., we abort the protocol if Alice and Bobs' 
measurement outcomes disagree, performances of stabilizer EDPs may be 
improved by employing T 7^ {0}, i.e., we decide whether to abort or per- 
form the error correction according to the difference of Alice and Bobs' 
measurement outcome. Exploring the potential of T 7^ {0} is a future 
research agenda. 
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